← Vulnerability feed

Vulnerability record · CVE-2018-10619 · published 7 June 2018

CVE-2018-10619: Rockwellautomation rslinx classic unquoted search path vulnerability

Rockwellautomation · Rslinx Classic

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.

7.8 CVSS 3.0 High EPSS 2.8% · top 14.3% CWE-428 · Unquoted search path
7.8CVSS 3.0 base score, v2 4.6
2.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
6References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may allow an authorized, but non-privileged local user to execute arbitrary code and allow a threat actor to escalate user privileges on the affected workstation.

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/104415 Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-158-01 Third Party AdvisoryUS Government ResourceVDB Entry
https://www.exploit-db.com/exploits/44892/ ExploitThird Party AdvisoryVDB Entry
http://www.securityfocus.com/bid/104415 Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-18-158-01 Third Party AdvisoryUS Government ResourceVDB Entry
https://www.exploit-db.com/exploits/44892/ ExploitThird Party AdvisoryVDB Entry

Track CVE-2018-10619 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2020-12001Rockwellautomation factorytalk linx improper input validation vulnerabilityFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH:…EPSS 12%8.1CVE-2020-11999Rockwellautomation factorytalk linx improper input validation vulnerabilityFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH:…EPSS 2.8%7.8CVE-2020-10642Rockwellautomation rslinx classic incorrect permission assignment vulnerabilityIn Rockwell Automation RSLinx Classic versions 4.11.00 and prior, an authenticated local attacker could modify a registry key, which could lead to th…EPSS 0.45%7.5CVE-2020-12003Rockwellautomation factorytalk linx path traversal vulnerabilityFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH:…EPSS 5.2%7.5CVE-2020-12005Rockwellautomation factorytalk linx unrestricted file upload vulnerabilityFactoryTalk Linx versions 6.00, 6.10, and 6.11, RSLinx Classic v4.11.00 and prior,Connected Components Workbench: Version 12 and prior, ControlFLASH:…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2018-10619), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.